ETSI Publishes Guidance for Secure Quantum Random Number Generators

Insider Brief

• ETSI has published Technical Report TR 104 171 with implementation guidance for improving the security and quality of Quantum Random Number Generator outputs.
• The report covers the QRNG lifecycle, including quantum entropy-source validation, randomness extraction, operational monitoring, tamper protection, side-channel security and output provenance.
• ETSI introduces an “Entropy Zero Trust” approach and identifies future standardization priorities including attestation, logging, security certification and QRNG integration with post-quantum cryptography.

PRESS RELEASE — ETSI announces its Technical Report, ETSI TR 104 171, which delivers much needed implementation guidance to mitigate weaknesses that could undermine the quality and security of Quantum Random Number Generator (QRNG) outputs.

Random number generators are a critical feature of modern security as cryptographic systems rely on unpredictable random values to generate encryption keys and other security parameters. QRNGs exploit quantum phenomena as a source of randomness, offering an approach based on physical processes that are inherently unpredictable rather than deterministic algorithms. However, while output may appear statistically random an adversary with access to relevant side-information adds a layer of predictability which they can exploit, undermining its randomness.